BETA Shoulder is in beta — Findings may sometimes be wrong. Your feedback shapes what we fix next. Share feedback
Shoulder.dev

Understand what every change actually did to your system.
Rules / YAML

Privileged Container Detected

CRITICAL CWE-250 · CWE-250

Description

Detects containers running with privileged security context.

What Shoulder detects

Privileged containers have access to all devices on the host and run with the same privileges as processes running on the host.

How to fix

Set privileged to false in the security context.

```yaml
securityContext:
  privileged: false
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-250/privileged-container

Applies to

Languages

📄 YAML

Frameworks

kubernetes

References

Documentation ↗ Learn about CWE-250

Scan for this issue

Detect with Shoulder CLI
npx @shoulderdev/cli trust --rule=kubernetes-privileged-container .

Related rules

Container runs as root HIGH Docker User and File Permissions HIGH Privilege Escalation Allowed HIGH Dangerous Linux Capabilities Added CRITICAL Host Namespace Access Enabled CRITICAL
← All Rules Source: rules/kubernetes/security/privileged-container.yaml